Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes

Researchers escaped sandboxes in Cursor, Codex, Gemini CLI, and Antigravity by having AI agents write files that trusted host tools later run. The findings resulted in multiple CVEs and patches, with Google downgrading two Antigravity findings. The attacks exploited a chain of execution from AI-generated code to host system commands.